Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWDANdblHD6K4YNIr5iXk7wu4gw.roa
File:                     fWDANdblHD6K4YNIr5iXk7wu4gw.roa (raw, json)
Hash identifier:          V+uEtsitUgYAg+4hVsAc+X31HNeZP2JsdHKV3GkgJP4=
Subject key identifier:   7D:60:C0:35:D6:E5:1C:3E:8A:E1:83:48:AF:98:97:93:BC:2E:E2:0C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DF7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWDANdblHD6K4YNIr5iXk7wu4gw.roa
Signing time:             Fri 01 Sep 2023 10:15:31 +0000
ROA not before:           Fri 01 Sep 2023 10:15:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        119.77.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7671 (0x1df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7D60C035D6E51C3E8AE18348AF989793BC2EE20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:6d:e2:b1:f7:10:c1:eb:37:6e:bb:18:d2:
                    ce:88:2a:f2:7e:05:9a:33:31:8a:30:38:82:f7:b4:
                    0a:3d:c4:cf:67:9d:f1:9e:44:90:76:e4:7b:7b:a7:
                    78:59:4e:bf:30:17:92:3e:19:ed:70:b3:84:cd:08:
                    4e:e6:c7:67:7d:d2:31:41:c0:57:93:bd:58:64:33:
                    70:76:e4:36:c8:6a:4d:e4:f9:43:80:e9:e5:32:7e:
                    6c:2d:aa:69:f8:26:58:3b:6d:69:bd:46:6a:e4:40:
                    c1:09:22:42:cb:d5:23:c6:de:15:aa:a5:05:bc:01:
                    a2:a5:54:2d:56:0c:a6:9b:cc:ef:80:e2:45:f9:37:
                    fc:3b:ce:88:e6:f8:1c:d4:dc:2c:3a:58:7e:57:e7:
                    9b:45:07:2b:19:94:f0:bd:3a:d8:63:17:a6:27:23:
                    86:78:28:02:ff:4f:f2:3f:70:7a:39:2a:da:bd:d7:
                    3c:32:b3:5b:e0:cb:b2:32:6a:f1:3d:fc:77:c3:92:
                    d3:f1:97:a7:a0:ff:9a:bd:05:10:2c:20:24:25:a2:
                    c1:86:83:ff:5e:96:26:7a:21:21:0f:71:db:4d:0e:
                    6b:67:f8:0a:5a:a6:60:7a:bb:09:96:3d:75:33:d2:
                    79:15:3d:10:9d:d8:a3:b7:fa:d0:c2:07:08:1f:e4:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:C0:35:D6:E5:1C:3E:8A:E1:83:48:AF:98:97:93:BC:2E:E2:0C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWDANdblHD6K4YNIr5iXk7wu4gw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:72:e0:e0:6e:d4:82:85:14:2f:fb:1f:b0:a5:bd:44:af:
         06:5a:f4:de:61:c8:05:99:b9:99:12:0a:25:d7:a7:70:3f:f3:
         45:1f:8d:ca:69:9c:56:a6:33:d8:82:27:1f:8a:42:8b:32:b5:
         64:d8:c1:4c:23:3b:ac:c0:19:83:71:9e:a7:87:54:c9:38:69:
         f1:2c:42:ff:5b:46:37:90:ae:68:62:52:7d:71:16:97:27:96:
         e0:01:21:e0:d4:b4:e8:91:e0:40:d4:16:83:01:e7:cc:a8:74:
         e2:13:dd:d9:35:52:23:ca:09:50:3a:86:10:e9:57:da:48:56:
         85:da:8a:a2:15:a7:3f:f8:41:2c:be:61:00:45:fe:05:28:e9:
         98:bc:d4:17:cb:28:48:aa:c8:e5:67:30:44:1b:aa:f7:28:bd:
         60:36:82:83:6f:8b:1a:5e:46:73:37:61:ae:d8:4c:8f:b9:25:
         59:47:12:80:bc:8d:69:bf:82:cb:2c:82:ab:64:fe:e8:09:f9:
         bb:80:38:28:9a:d4:0a:2e:84:8b:fc:4f:15:79:5e:8d:fb:2c:
         04:81:e8:47:b3:3f:f0:92:67:08:8f:07:69:2d:b4:c0:58:dd:
         e2:76:49:01:91:1e:c9:cc:b3:ef:dd:56:17:a8:eb:84:49:b3:
         50:8a:b9:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdENjBDMDM1RDZFNTFD
M0U4QUUxODM0OEFGOTg5NzkzQkMyRUUyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH6m3isfcQwes3brsY0s6IKvJ+BZozMYowOIL3tAo9xM9nnfGe
RJB25Ht7p3hZTr8wF5I+Ge1ws4TNCE7mx2d90jFBwFeTvVhkM3B25DbIak3k+UOA
6eUyfmwtqmn4Jlg7bWm9RmrkQMEJIkLL1SPG3hWqpQW8AaKlVC1WDKabzO+A4kX5
N/w7zojm+BzU3Cw6WH5X55tFBysZlPC9OthjF6YnI4Z4KAL/T/I/cHo5Ktq91zwy
s1vgy7IyavE9/HfDktPxl6eg/5q9BRAsICQlosGGg/9eliZ6ISEPcdtNDmtn+Apa
pmB6uwmWPXUz0nkVPRCd2KO3+tDCBwgf5GPbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfWDANdblHD6K4YNIr5iXk7wu4gwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZXREFOZGJsSEQ2SzRZTkly
NWlYazd3dTRndy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYgwDQYJKoZIhvcNAQELBQADggEBAFqMcuDgbtSChRQv+x+wpb1ErwZa9N5hyAWZ
uZkSCiXXp3A/80UfjcppnFamM9iCJx+KQosytWTYwUwjO6zAGYNxnqeHVMk4afEs
Qv9bRjeQrmhiUn1xFpcnluABIeDUtOiR4EDUFoMB58yodOIT3dk1UiPKCVA6hhDp
V9pIVoXaiqIVpz/4QSy+YQBF/gUo6Zi81BfLKEiqyOVnMEQbqvcovWA2goNvixpe
RnM3Ya7YTI+5JVlHEoC8jWm/gsssgqtk/ugJ+buAOCia1AouhIv8TxV5Xo37LASB
6EezP/CSZwiPB2kttMBY3eJ2SQGRHsnMs+/dVheo64RJs1CKuRw=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org